maintainx-incident-runbook
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches service status and updates from
status.getmaintainx.comandapi.getmaintainx.com. These are the official domains for the MaintainX service and are considered well-known/trusted sources for this skill's context. - [COMMAND_EXECUTION]: Includes Bash and TypeScript diagnostics using standard tools such as
curl,jq, andredis-clito check integration health. These commands are directly related to the skill's stated purpose of incident response. - [CREDENTIALS_UNSAFE]: Provides instructions for rotating API keys (
MAINTAINX_API_KEY) using the Google Cloud Secret Manager CLI as part of an incident mitigation strategy. This is a documented safe practice for key rotation and does not involve hardcoded secrets. - [REMOTE_CODE_EXECUTION]: No patterns of remote script execution or piped downloads were detected.
Audit Metadata